RHSA-2023:6679: CVEs fixed (Red Hat)
RHSA-2023:6679 fixes 2 tracked CVEs. Affected systems and fixed versions.
- CVE-2023-27534 HIGH 8.8 UPGRADE MITIGATE A path traversal vulnerability exists in curl <8.0.0 SFTP implementation causes the tilde (~) character to be
- CVE-2023-27536 MEDIUM 5.9 UPGRADE MITIGATE An authentication bypass vulnerability exists libcurl <8.0.0 in the connection reuse feature which can reuse p
Applies to
- RHEL 9 · fixed in curl-7.76.1-26.el9